Draft for review. Not yet reviewed by counsel.
Privacy policy
Last updated: September 17, 2026
1. What Long Haul does
Long Haul helps software companies understand onboarding, product activity, billing status, retention risk, and follow-up work. Our customers decide what information to send and how to use the resulting recommendations and actions.
2. Information we receive
Long Haul receives product usage events, names, email addresses, phone numbers, account and role information, subscription and billing status, purchased seat counts, message and task history, and technical information needed to receive and secure those records. We also process account details for people who administer Long Haul.
3. Customer and processor roles
Our customers are the data controllers for information they send about their customers and end users. Long Haul processes that information on their behalf and according to their instructions. Questions about why a customer collected or used your information should first be directed to that customer.
4. How we use information
We use information to operate, secure, maintain, and improve the service; receive product and billing signals; calculate onboarding and health status; identify possible retention risk; create requested actions and messages; deliver configured notifications; provide support; prevent abuse; and meet legal obligations. We do not sell end-user personal information.
5. Tenant isolation and security
Customer data is stored per tenant and isolated so no tenant can access another tenant’s data. Access controls are enforced at the data layer in addition to application checks. We use reasonable administrative, technical, and organizational safeguards, but no system can guarantee absolute security.
6. Subprocessors
We use service providers to operate Long Haul. Current categories and providers include Lovable Cloud and Cloudflare for application hosting and delivery; database and authentication infrastructure provided through Lovable Cloud; Resend for email delivery when a customer connects it; Twilio for text messaging when connected; Stripe for subscription and billing events; and Lovable AI, with Google Gemini models, for optional AI-assisted analysis and writing. A provider receives information only when needed for the configured feature.
7. Retention and deletion
We retain information while needed to provide the service, satisfy the customer’s instructions, resolve disputes, secure the platform, and meet legal obligations. A customer may request export or deletion of its tenant data. An end user should usually send a request to the Long Haul customer that supplied the data so that customer can verify and direct the request.
8. Deletion and privacy requests
To request access, correction, export, or deletion, contact privacy@seatsthatstay.com. Include the company or product whose account is involved and enough information for us to locate the correct tenant. We may need to coordinate with the customer acting as controller and verify the requester’s identity before acting.
9. International processing and legal disclosures
Information may be processed where we and our subprocessors operate. We may disclose information when required by law, to protect rights and safety, to investigate abuse, or as part of a business transaction subject to appropriate protections.
10. Changes and contact
We may update this policy as the service changes and will revise the date above. Questions or requests may be sent to privacy@seatsthatstay.com.